update script config search permissions

Author: sbaidachni

infra/main.search_configuration.tf

@@ -244,7 +244,7 @@ resource "time_sleep" "wait_for_rbac" {
     azurerm_role_assignment.script_main_storage_file_contributor,
     # AI Search permissions
     azurerm_role_assignment.script_search_service_contributor,
-    azurerm_role_assignment.script_search_index_data_contributor,
+    # azurerm_role_assignment.script_search_index_data_contributor,
     # Azure OpenAI permissions
     azurerm_role_assignment.script_cognitive_services_openai_user,
     # Other permissions
@@ -266,7 +266,7 @@ resource "time_sleep" "wait_for_storage_network" {
 resource "time_sleep" "wait_for_search_permissions" {
   depends_on = [
     azurerm_role_assignment.script_search_service_contributor,
-    azurerm_role_assignment.script_search_index_data_contributor,
+    # azurerm_role_assignment.script_search_index_data_contributor,
     time_sleep.wait_for_rbac
   ]
   create_duration = "30s"
@@ -463,7 +463,7 @@ resource "null_resource" "verify_rbac_propagation" {
     azurerm_role_assignment.script_deployment_container_file_owner,
     # AI Search permissions
     azurerm_role_assignment.script_search_service_contributor,
-    azurerm_role_assignment.script_search_index_data_contributor,
+    # azurerm_role_assignment.script_search_index_data_contributor,
     # Azure OpenAI permissions
     azurerm_role_assignment.script_cognitive_services_openai_user
   ]

infra/main.security.tf

@@ -48,18 +48,6 @@ resource "azurerm_role_assignment" "script_search_service_contributor" {
   role_definition_name = "Search Service Contributor"
 }
 
-resource "azurerm_role_assignment" "script_search_index_data_contributor" {
-  principal_id         = azurerm_user_assigned_identity.script_identity.principal_id
-  scope                = azurerm_search_service.ai_search.id
-  role_definition_name = "Search Index Data Contributor"
-}
-
-resource "azurerm_role_assignment" "script_search_index_data_reader" {
-  principal_id         = azurerm_user_assigned_identity.script_identity.principal_id
-  scope                = azurerm_search_service.ai_search.id
-  role_definition_name = "Search Index Data Reader"
-}
-
 # --- Main Storage Account Permissions ---
 
 resource "azurerm_role_assignment" "script_main_storage_queue_contributor" {